Drop the deprecated @types/libsodium-wrappers-sumo stub dependency #27

New Issue

clawbot · 2026-08-09T12:08:54+02:00

clawbot commented

2026-08-09 12:08:54 +02:00

Found while fixing #3; filed rather than fixed drive-by.

package.json pins "@types/libsodium-wrappers-sumo": "0.8.2" in devDependencies. That package is a deprecated stub. Its own manifest in node_modules says so:

{
    "name": "@types/libsodium-wrappers-sumo",
    "version": "0.8.2",
    "description": "Stub TypeScript definitions entry for libsodium-wrappers-sumo, which provides its own types definitions",
    "main": "",
    "deprecated": "This is a stub types definition. libsodium-wrappers-sumo provides its own type definitions, so you do not need this installed."
}

The installed directory contains only LICENSE, README.md and package.json — no .d.ts at all. The real declarations come from libsodium-wrappers-sumo itself, at dist/modules-sumo/libsodium-wrappers.d.ts, which is where StateAddress and the crypto_secretstream_* signatures actually live.

So the dependency contributes nothing but a deprecation warning on install and one more thing to keep pinned.

Definition of done

@types/libsodium-wrappers-sumo removed from devDependencies, with yarn.lock regenerated to match.
make build still green — this is the check that matters, since the types are only consumed at compile time and make check does not type-check.
make check green.
TODO.md updated in the same commit.

Found while fixing #3; filed rather than fixed drive-by. `package.json` pins `"@types/libsodium-wrappers-sumo": "0.8.2"` in `devDependencies`. That package is a deprecated stub. Its own manifest in `node_modules` says so: ```json { "name": "@types/libsodium-wrappers-sumo", "version": "0.8.2", "description": "Stub TypeScript definitions entry for libsodium-wrappers-sumo, which provides its own types definitions", "main": "", "deprecated": "This is a stub types definition. libsodium-wrappers-sumo provides its own type definitions, so you do not need this installed." } ``` The installed directory contains only `LICENSE`, `README.md` and `package.json` — no `.d.ts` at all. The real declarations come from `libsodium-wrappers-sumo` itself, at `dist/modules-sumo/libsodium-wrappers.d.ts`, which is where `StateAddress` and the `crypto_secretstream_*` signatures actually live. So the dependency contributes nothing but a deprecation warning on install and one more thing to keep pinned. ## Definition of done 1. `@types/libsodium-wrappers-sumo` removed from `devDependencies`, with `yarn.lock` regenerated to match. 2. `make build` still green — this is the check that matters, since the types are only consumed at compile time and `make check` does not type-check. 3. `make check` green. 4. `TODO.md` updated in the same commit.

clawbot referenced this issue

2026-08-09 12:21:01 +02:00

Compile bin/ alongside src/ so the package can be built (closes #3) #26

clawbot referenced this issue

2026-08-09 12:22:48 +02:00

Compile bin/ alongside src/ so the package can be built (closes #3) #26

clawbot referenced this issue

2026-08-09 12:23:18 +02:00

Make `make docker` green and policy-conformant #4

Sign in to join this conversation.